Add-ons
Unmangle Microsoft ATP Safelinks 3.0.1
by Peter Havekes
Users of outlook.com and o365 who have Advanced Thread Protection enabled will have all URL's in emails changed to redirect them to an Microsoft filter before opening. This is a bad idea.
This plugin will change the URL back to the original value.
About this Add-on
Thunderbird plugin to unmangle Outlook Protection Safelinks
Based upon https://github.com/mbattersby/unmangleOutlookSafelinks, original version by mib@post.com
Office 365 Advanced Threat Protection will change all url's in emails to redirect them to an Microsoft filter before opening.
This will leak information to microsoft and makes it impossible to see if
the original url was safe to open.
E.g. a link to
http://phishingsite.fake.ru/you/are/hacked.php
will show as
https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fphishingsite.fake.ru%2Fyou%2Fare%2Fhacked.phpdata=02%7C01%7Csender.mail%40domain.tld%7C8177af7905a4406ecae208d5dc1fb7c9%7C87c50b582ef2423da4dbaedde7c84efcfa%7C0%7C0%7C63453351150545403&sdata=Te0O1xGxxxULxdzbxQ%2xxxyql2QjTt4Ken%2F00JB%2BV%2FPUA%3D&reserved=0
and will not be recogniosed by a user as dangerous.
This plugin will change the url back to the original value.
Please report issues and requests here
Based upon https://github.com/mbattersby/unmangleOutlookSafelinks, original version by mib@post.com
Office 365 Advanced Threat Protection will change all url's in emails to redirect them to an Microsoft filter before opening.
This will leak information to microsoft and makes it impossible to see if
the original url was safe to open.
E.g. a link to
http://phishingsite.fake.ru/you/are/hacked.php
will show as
https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fphishingsite.fake.ru%2Fyou%2Fare%2Fhacked.phpdata=02%7C01%7Csender.mail%40domain.tld%7C8177af7905a4406ecae208d5dc1fb7c9%7C87c50b582ef2423da4dbaedde7c84efcfa%7C0%7C0%7C63453351150545403&sdata=Te0O1xGxxxULxdzbxQ%2xxxyql2QjTt4Ken%2F00JB%2BV%2FPUA%3D&reserved=0
and will not be recogniosed by a user as dangerous.
This plugin will change the url back to the original value.
Please report issues and requests here
